keycloak/files/keycloak.conf

77 lines
2.6 KiB
Plaintext

# Keycloak Configuration File
# This file contains runtime configuration for Keycloak
# =============================================================================
# DATABASE CONFIGURATION
# =============================================================================
db=postgres
db-url-host=keycloak-postgres
db-url-database=keycloak
db-username=keycloak
db-password=password
db-pool-initial-size=5
db-pool-min-size=5
db-pool-max-size=20
# =============================================================================
# HTTP/HTTPS CONFIGURATION
# =============================================================================
http-enabled=true
http-port=8080
hostname-strict=false
hostname-strict-https=false
# For production, uncomment and configure HTTPS:
# https-port=8443
# https-certificate-file=/path/to/certificate.pem
# https-certificate-key-file=/path/to/private-key.pem
# =============================================================================
# LOGGING CONFIGURATION
# =============================================================================
log-level=INFO
log-console-output=default
log-console-format=%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n
# =============================================================================
# FEATURES CONFIGURATION
# =============================================================================
health-enabled=true
metrics-enabled=true
# =============================================================================
# SECURITY CONFIGURATION
# =============================================================================
# Disable features not needed for token exchange
feature-disabled=impersonation
# =============================================================================
# PERFORMANCE CONFIGURATION
# =============================================================================
# Cache configuration
cache=ispn
cache-stack=tcp
# Transaction configuration
transaction-xa-enabled=false
# =============================================================================
# DEVELOPMENT SETTINGS
# =============================================================================
# These settings are for development only
# Remove or modify for production
# Allow admin console access from any host
# hostname-admin-url=http://localhost:8080
# =============================================================================
# PRODUCTION OVERRIDES
# =============================================================================
# Uncomment and modify these for production deployments
hostname=<nom-de-domaine>
#hostname-strict=true
#hostname-strict-https=true
#http-enabled=false
#proxy=edge
proxy-headers=xforwarded